context-to-gantt
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script (
scripts/extract-tasks.py) to validate that the extracted project data conforms to the required JSON schema before generating the final HTML report. This script runs locally on the temporary data file. - [EXTERNAL_DOWNLOADS]: The generated Gantt chart HTML template fetches Tailwind CSS from
cdn.tailwindcss.com. This is a well-known service and the reference is documented and intended for styling the output. - [SAFE]: The skill demonstrates defensive coding by implementing an
esc()function within its HTML template to escape characters like<,>, and". This mitigates potential Cross-Site Scripting (XSS) risks that could arise if malicious or malformed project descriptions were processed into the final HTML output.
Audit Metadata